Static task
static1
Behavioral task
behavioral1
Sample
3cbb890609226c8f7f9ac0544bc34f8e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3cbb890609226c8f7f9ac0544bc34f8e.exe
Resource
win10v2004-20231222-en
General
-
Target
3cbb890609226c8f7f9ac0544bc34f8e
-
Size
156KB
-
MD5
3cbb890609226c8f7f9ac0544bc34f8e
-
SHA1
32398e69d22083d946a45a6fbfa004070c383dee
-
SHA256
4a4bf6f936fa0db96d49ee6be31d9643843c2f900ff982a7c3512d7882ab3621
-
SHA512
a8b9e1b60204d5bff482abac703460faa1654edfa2feea1a835ed7940bfa3650b966b61dd01c72a5fee46d95ec503b676d9019fb6865f53514412dc976bec044
-
SSDEEP
3072:YL5DB65d9/e6OwCnh8TzXNnGWCZbU2yfuhJvBzsscb+qBTMMF4dJsdujZxall72o:k65uMCnhSGbvhlc7zF4dJu44D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cbb890609226c8f7f9ac0544bc34f8e
Files
-
3cbb890609226c8f7f9ac0544bc34f8e.exe windows:4 windows x86 arch:x86
5bdbea284423acf9192b9a0c870eb6a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
ole32
CoTaskMemFree
CoUninitialize
CoTaskMemRealloc
CoCreateInstance
CoTaskMemAlloc
CoInitialize
shell32
SHGetSpecialFolderLocation
ShellExecuteW
SHGetPathFromIDListW
kernel32
LCMapStringA
CreateProcessW
GetVDMCurrentDirectories
Sleep
GetFileType
WriteConsoleW
FindResourceW
GetSystemTimeAsFileTime
CopyFileW
InterlockedCompareExchange
VirtualAlloc
GetStringTypeW
DeleteFileW
LockResource
GetCurrentThreadId
HeapCreate
GetModuleFileNameA
RaiseException
GetStdHandle
GetACP
LocalAlloc
IsProcessorFeaturePresent
LoadLibraryExW
GetLocaleInfoA
FlushInstructionCache
SetStdHandle
GetProcessHandleCount
lstrcmpiW
SetFilePointer
GetConsoleMode
QueryPerformanceCounter
GetModuleHandleW
CreateFileW
GetCurrentProcess
GetCPInfo
GetProcAddress
HeapSize
LoadLibraryW
SetLastError
GetFileSize
LCMapStringW
GetModuleHandleA
GetVersion
GetModuleFileNameW
HeapDestroy
GetProcessHeap
lstrlenA
CreateSemaphoreW
GetStartupInfoA
IsDebuggerPresent
UnhandledExceptionFilter
GetCommandLineW
LeaveCriticalSection
GetTickCount
GetCurrentProcessId
SetUnhandledExceptionFilter
DeleteCriticalSection
RtlUnwind
GetSystemDirectoryW
FlushFileBuffers
CloseHandle
EnumResourceNamesA
GetThreadLocale
GetConsoleOutputCP
TlsGetValue
ExitProcess
InitializeCriticalSection
LoadLibraryA
InterlockedDecrement
FreeEnvironmentStringsW
GetEnvironmentStrings
lstrcmpA
WriteFile
GetLastError
WaitForSingleObject
GetCommandLineA
LocalFree
LoadResource
WideCharToMultiByte
TlsSetValue
WriteConsoleA
InterlockedIncrement
InterlockedExchange
GetStartupInfoW
GetVersionExA
FreeEnvironmentStringsA
GetEnvironmentStringsW
TlsFree
WritePrivateProfileSectionW
HeapFree
HeapAlloc
GetDriveTypeW
SetHandleCount
CreateFileA
VirtualFree
GetOEMCP
ReadFile
GetFileAttributesW
FreeLibrary
CreateFileMappingW
GetStringTypeA
TlsAlloc
SizeofResource
MulDiv
GetConsoleCP
GetVersionExW
HeapReAlloc
lstrlenW
msvfw32
ICInfo
user32
TranslateMessage
GetWindow
RegisterClassExW
SetWindowTextW
EndPaint
SetWindowPos
CreateWindowExW
GetParent
MapWindowPoints
GetWindowRect
GetWindowTextLengthW
MessageBoxW
DestroyWindow
GetClientRect
DispatchMessageW
SystemParametersInfoW
BeginPaint
GetDC
GetClassInfoExW
SetCapture
PeekMessageW
GetDlgItemTextW
GetWindowInfo
GetDlgItem
SetDlgItemTextW
LoadCursorW
EndDialog
gdi32
GetDeviceCaps
CreateFontIndirectW
DeleteObject
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ